$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: O38mrIgV69OsjbdGdsdhRdoMR29rdk/2OTMw24XHSQ4= Subject key identifier: D1:E9:03:A3:62:C9:3F:5D:77:0C:33:50:0A:A4:0B:86:4E:80:B7:CB Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 06C5CA6E8DE7EA8F3E6639D67B8609610589FA5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: B3 Signing time: Wed 29 Jul 2026 20:40:12 +0000 Manifest this update: Wed 29 Jul 2026 20:35:12 +0000 Manifest next update: Fri 31 Jul 2026 00:25:12 +0000 Files and hashes: 1: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: 0CxyUxpFNQIFlSk3Lb+SFtzH1lN9ImJQgQaAmMxA2VQ=) 2: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 3: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c5:ca:6e:8d:e7:ea:8f:3e:66:39:d6:7b:86:09:61:05:89:fa:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Jul 29 20:35:12 2026 GMT Not After : Jul 31 00:25:12 2026 GMT Subject: CN=D1E903A362C93F5D770C33500AA40B864E80B7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:e3:9a:57:f5:38:27:b7:b7:fc:dc:4c:35: 5f:ea:0c:c3:7c:da:12:ae:79:37:26:e3:ef:3f:5e: b2:9d:08:6a:a6:3e:b5:c2:b4:54:6c:db:47:33:58: 85:c0:a4:b9:50:28:f3:20:92:d2:6b:6c:67:4a:3f: f0:d1:b6:63:96:45:6d:32:b5:d8:90:df:0f:31:0b: 9d:d2:c2:f8:93:2f:be:d5:69:f7:2c:88:90:fb:c8: b0:6c:40:30:77:07:f0:d4:9f:7e:22:17:80:73:32: dd:ef:70:4b:51:68:58:7b:c6:c9:85:5a:b3:c7:4e: 0e:bc:0d:ba:da:5e:bf:eb:56:6e:59:2d:d9:7c:2b: 12:12:a9:de:56:d5:15:03:9c:79:d4:46:61:76:3c: f6:25:62:74:bf:fe:69:20:07:8b:6a:a3:92:93:70: a4:83:0a:3d:7d:12:80:54:3a:f7:95:8b:7d:9e:4c: 2f:8f:4d:45:9b:d4:3d:2f:f0:ce:34:14:c1:1b:02: 3b:a7:b3:78:6b:ac:4a:75:45:e1:2e:c8:35:fb:e0: 42:be:d8:2d:36:87:0c:3b:0d:18:3b:14:77:bf:a7: 59:60:a1:10:d4:4a:92:db:96:6e:0f:0a:4e:e2:36: 72:95:ea:55:5b:9f:82:03:70:b8:fa:37:7a:8a:1b: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:03:A3:62:C9:3F:5D:77:0C:33:50:0A:A4:0B:86:4E:80:B7:CB X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f2:0f:89:e8:26:57:df:1f:3e:e5:ac:5b:e5:60:ea:f1:9c: a1:35:e3:50:bb:36:3d:dd:9d:bf:a5:10:84:01:1e:27:e7:a7: 9b:bc:99:66:0c:1e:03:dd:e3:fa:ef:05:46:e4:15:a6:69:0e: 35:4c:c7:7e:62:3b:41:e7:87:6c:b1:0f:6e:a9:b4:d0:1f:f3: 54:92:03:b8:d0:f9:58:6b:51:b8:f0:c6:0e:ed:c8:a3:24:c3: a4:f3:c8:d8:60:63:3e:35:f5:e4:1e:0b:3c:db:44:f1:b1:b0: 81:34:01:0d:d5:3b:c3:59:6a:72:8e:6d:c5:db:44:e0:e7:b5: 46:37:d8:d4:7e:3c:f9:4a:22:c5:47:cf:f1:5a:bc:2b:22:06: 95:ca:01:47:63:79:ac:30:38:13:c0:ec:d6:fc:ed:e3:0c:64: 19:09:97:2b:92:c4:6f:7c:9d:a8:16:95:e8:c7:d3:34:2a:4c: 6c:cd:60:90:3e:f6:38:4a:6a:58:b1:47:77:e2:74:dd:c9:c1: d9:3c:06:1a:7d:90:a3:f7:2e:4c:6c:0f:b0:ff:9a:f5:e6:71: 6b:35:a4:87:3c:ac:e3:a4:ea:15:ff:d3:88:b1:98:31:7c:14: 6e:6c:43:ce:6b:a5:86:1c:d8:78:ec:91:6c:f0:89:70:9f:a9: dd:ba:df:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBsXKbo3n6o8+ZjnWe4YJYQWJ+l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA3MjkyMDM1MTJaFw0yNjA3MzEwMDI1MTJaMDMxMTAvBgNV BAMTKEQxRTkwM0EzNjJDOTNGNUQ3NzBDMzM1MDBBQTQwQjg2NEU4MEI3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CuOaV/U4J7e3/NxMNV/qDMN8 2hKueTcm4+8/XrKdCGqmPrXCtFRs20czWIXApLlQKPMgktJrbGdKP/DRtmOWRW0y tdiQ3w8xC53SwviTL77VafcsiJD7yLBsQDB3B/DUn34iF4BzMt3vcEtRaFh7xsmF WrPHTg68DbraXr/rVm5ZLdl8KxISqd5W1RUDnHnURmF2PPYlYnS//mkgB4tqo5KT cKSDCj19EoBUOveVi32eTC+PTUWb1D0v8M40FMEbAjuns3hrrEp1ReEuyDX74EK+ 2C02hww7DRg7FHe/p1lgoRDUSpLblm4PCk7iNnKV6lVbn4IDcLj6N3qKG15BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0ekDo2LJP113DDNQCqQLhk6At8swHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfIPiegmV98f PuWsW+Vg6vGcoTXjULs2Pd2dv6UQhAEeJ+enm7yZZgweA93j+u8FRuQVpmkONUzH fmI7QeeHbLEPbqm00B/zVJIDuND5WGtRuPDGDu3IoyTDpPPI2GBjPjX15B4LPNtE 8bGwgTQBDdU7w1lqco5txdtE4Oe1RjfY1H48+UoixUfP8Vq8KyIGlcoBR2N5rDA4 E8Ds1vzt4wxkGQmXK5LEb3ydqBaV6MfTNCpMbM1gkD72OEpqWLFHd+J03cnB2TwG Gn2Qo/cuTGwPsP+a9eZxazWkhzys46TqFf/TiLGYMXwUbmxDzmulhhzYeOyRbPCJ cJ+p3brfUw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:10 2026 by rpki-client